Password Management System / News: Recent posts

cpm is a small console tool to manage passwords and store them public key encrypted in a file - even for more than one person. The encryption is handled via GnuPG so you can access the programs data via gpg as well.

The next release of CPM 0.25beta will be out as soon as the latest CDK release is available in the distributions.

Two bugs were fixed which caused the application crash. Moreover a user dialog was added which allows the user to automatically remove a left lockfile.

Main issue for this release is support of a new GpgME 1.1 feature which enables cpm to autodetect the recipients of it's database file. Until now a wrapper script was necessary for this function. Furthermore a minor bug with the --readonly option was fixed.

Fixed a bug in the security checks where some valid locale settings did not pass the test. Moreover a new option allows to be locked within the defined templates. Some more user interface cleanups have also been made.

Added an UTF-8 check and low max. memory limits are handled correcly now. The error is reported properly, the application no longer segfaults.

The new version offers better handling of signers of the message. The default key is no longer used and instead the used keys to encrypt the data are also used to sign it.

Some versions of CDK could not be used to compile CDK - especially on Gentoo. This has been fixed.

Fixed a problem with the GPG_AGENT_INFO variable, added a check for the max locked memory setting, added a fix to make cpm compile with new versions of CDK and added support fo uniquly listing the CLI search results.

Several small bugs (mostly for the GUI) have been fixed and the CLI search now also supports regular expression searches.

Alot of small GUI issues have been fixed.

Some encoding issues within the XML file have been fixed.

Some small bugs were fixed. A memory leak in the CLI has been fixed. The search returns results once more. Some short commandline options which were not recognized have been fixed.

A core dump has been fixed which occured when the help screen was supposed to be displayed. Finally, cpm has a manual page now adding to the projects documentation.

Due to some newly added test routines a severe bug in the de- and encryption function was detected and fixed.
This bug might corrupt large datafiles, so an update to the new version is highly recommended.

The new release has several major feature enhancements like gzip support for the data files and security features like memory protection of the application.

The new release provides a new import interface and an ebuild file for Gentoo Linux now is also provided.

The new release fixes a configure bug on Gentoo Linux and adds DTD validation to the XML data.

Encrypted keys are now listed in the save dialog, when using /dev/random a message is displayed to create more entropy in case the program freezes and most importantly a wrapper script that extracts the used keys the datafile was encrypted for; this way the user has no longer to remember the used keys.

For discussion about the usage of CPM a mailinglist was added to the project.

A severe bug in the tar archive that made it impossible to compile the source was fixed. control.in and the gettext files were included, and a check was added so this won't happen again. Mssing resource file parsing for the 'CrackLibCheck' flag that was already in the example resource file but not yet supported was fixed. A CTRL+W shortcut for saving the database and a status line were added.

The new version of CPM now supports gettext and already comes with a German translation. Moreover, cracklib is used to validate entered and generated passwords.

Harry has written the console password manager (cpm) and this will become version 2 of passwordms:

http://freshmeat.net/projects/cpm

Project is freezed for indefinite time